PT-2022-11299

Name of the Vulnerable Software and Affected Versions Artica Proxy versions 4.30.000000 SP206 through SP255 Artica Proxy VMware appliance versions 4.30.000000 through SP273 Description The issue is related to a Directory Traversal vulnerability. It can be exploited via the filename parameter to t...

MariaDB decimal_bin_size DoS

The vulnerability of the decimalbinsize component in the MariaDB database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures using specially crafted SQL statements...

PT-2022-13897

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 5.7.0 Description The issue is related to an out-of-bounds read in the r bin java bootstrap methods attr new function. This bug causes the program to read data past the end of the intended buffer, potentially allowing...

PT-2022-13896

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 5.7.0 Description The issue is related to an out-of-bounds read in the r bin java constant value attr new function. This bug causes the program to read data past the end of the intended buffer, potentially allowing...

MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size which is exploited via specially crafted SQL statements.

...

AZL-9361 CVE-2022-27387 affecting package mariadb for versions less than 10.6.8-1

MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimalbinsize, which is exploited via specially crafted SQL statements...

CVE-2022-27387

MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimalbinsize, which is exploited via specially crafted SQL statements...

DEBIAN-CVE-2022-27387

MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimalbinsize, which is exploited via specially crafted SQL statements...

ALPINE-CVE-2022-27387

MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimalbinsize, which is exploited via specially crafted SQL statements...

UBUNTU-CVE-2022-27387

MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimalbinsize, which is exploited via specially crafted SQL statements...

MariaDB 安全漏洞

MariaDB is a free and open source database management system from the MariaDB Foundation and a forked version of MySQL with the Maria storage engine. A security vulnerability exists in MariaDB Server v10.7 and lower, which stems from the inclusion of a global buffer overflow in the component...

PT-2022-13784

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 5.6.8 Description The issue is related to an out-of-bounds read in the r bin ne get relocs function. This may allow attackers to read sensitive information or cause a crash. Recommendations For versions prior to 5.6.8...

PT-2022-13785

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 5.6.8 Description The issue is related to an out-of-bounds read in the r bin ne get entrypoints function. This may allow attackers to read sensitive information or cause a crash. Recommendations For versions prior to...

PT-2022-13772

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 5.6.8 Description The issue is related to a NULL Pointer Dereference in the r bin ne get entrypoints function. This allows attackers to cause a denial of service, resulting in an application crash. Recommendations For...

CVE-2022-23900: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3.V5030.201204, allows an attacker to achieve unauthorized remote code execution via a malicious POST request through /cgi-bin/adm.cgi...

CVE-2022-1240

Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compiling, the program should executes into the rstrncpy function. Therefore I think it is very likely to be exploitable. For more general...

UBUNTU-CVE-2022-1238

Out-of-bounds Write in libr/bin/format/ne/ne.c in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see CWE...

CVE-2022-1238

Out-of-bounds Write in libr/bin/format/ne/ne.c in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see CWE...

PT-2022-13740

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 5.8.6 Description A heap buffer overflow issue exists in the libr/bin/format/mach0/mach0.c file of the radare2 GitHub repository. This issue is likely exploitable, especially when the address sanitizer is disabled...

CVE-2022-1238: Out-of-bounds Write

Out-of-bounds Write in libr/bin/format/ne/ne.c in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see CWE...